Information you provide
Account information can include your email address, phone number where that sign-in method is enabled, authentication information, date of birth and records of accepting our policies. Profile information includes your name, photos, biography, gender, nationality, country of residence, languages, interests and travel preferences. We also process travel plans, destinations, dates, itineraries, trip membership, connections, messages and other content you choose to submit. Reports, appeals and messages to support include the details and evidence you provide.
Information generated by use
We process account and content identifiers, timestamps, interaction and membership records, privacy and notification settings, and Free or Plus entitlement status. Where push notifications are enabled, device registration includes a device or installation identifier, platform, language and push token. Hosting and security systems may process IP addresses, request metadata and technical logs to deliver and protect the service. Travel destinations and photo location labels are information you enter; this policy does not describe continuous GPS tracking.
Why information is used
We use information to create and secure accounts, confirm age eligibility, show profiles according to access rules, support discovery and compatibility suggestions, manage trips and connections, deliver messages and notifications, provide support, investigate abuse and enforce our policies. Compatibility suggestions use profile and travel information; they are not identity checks or a guarantee of safety. We also use information to maintain and troubleshoot the service and meet applicable legal obligations.
Grounds for processing
Where applicable law requires a legal basis, we rely on providing the service you request, legitimate interests such as account security and abuse prevention where these do not override your rights, compliance with legal obligations, and consent where required. You can withdraw consent for optional processing, such as device permissions, without affecting processing that was lawful before withdrawal. Some features cannot operate without the information they need.
Who can see your information
Other users can see profile and trip information according to eligibility, sharing settings and the interaction involved. Trip participants and message recipients can access content shared with them. Your account contact details and full date of birth are not intended as public profile fields; age may be displayed. Private visibility is an access restriction, not a promise that recipients cannot copy content. Authorized personnel may access relevant information for support, safety and investigation. Reported messages and relevant evidence can be reviewed even when originally shared privately.
Service providers and other disclosures
JOVEYA uses infrastructure providers, including Supabase for app backend services and Cloudflare for this website’s hosting and delivery. Email services process support correspondence. Where enabled, authentication and notification providers process information needed for those features; external stores process their own purchases. Providers may process information on our behalf to supply these services. We may disclose relevant information where legally required, to protect rights or safety, or in a service transfer subject to applicable protections and notice. This website contains no advertising or analytics scripts.
Storage, security and international processing
We use access controls and other technical and organizational measures to help protect information. No system or transmission can be guaranteed completely secure. Information may be processed in countries other than where you live through our infrastructure providers. Where required, international processing must use safeguards required by applicable law. Do not send passwords, one-time codes, payment card details or identity documents in an unsolicited support email.
Retention and deletion
Information is kept for as long as needed for the service and the purposes described here. Relevant factors include whether your account is active, whether content is still needed for an ongoing interaction, unresolved support or safety cases, fraud prevention and legal obligations. The in-app deletion action ends account access, hides the profile and photos, ends active connections, withdraws relevant group memberships, cancels active owned trips and disables push registrations. This access-removal step is not proof that every stored record or file has been erased.
Requesting erasure of associated data
Use the Delete Account page or email support@joveya.app to request deletion of your account and associated personal data. Support may need to verify ownership and review what data can be erased or anonymized. The request covers account identifiers and contact details, profile fields and photos, travel information, messages, connections, preferences and device registrations, subject to justified exceptions. Limited report evidence, moderation records, fraud-prevention information and legally required records may need to remain restricted for the relevant purpose. Backups and copies independently saved by other users may not disappear immediately. We do not promise a fixed deletion or retention period in this policy; support will explain the applicable handling, any exception and its basis, and respond within deadlines required by applicable law.
Your choices and rights
You can edit available profile fields, manage privacy and notification settings, block users and request account deletion. Depending on applicable law, you may request access, correction, erasure, restriction, objection or a portable copy of your information, and complain to your local data protection authority. Automated data export is currently unavailable in the app; this does not remove applicable rights, and requests can be sent to support. We may ask for proportionate verification to protect your information.
Website storage and links
These public pages can be read without signing in. The language is represented in the page URL; this site does not set a language cookie or store a language preference. No tracking cookies, third-party fonts, embedded media or analytics scripts are included in this site. Cloudflare may process request and security information when hosting it. Email links open your email application and send nothing until you send the message. External services have their own privacy practices.
Adults only and policy updates
JOVEYA is for people aged 18 and over and is not intended for children. If you believe a person under 18 has provided account information, contact support so we can investigate and take appropriate action. Updates to this policy will show a version and effective date, and material changes will be communicated through an appropriate channel. Contact support@joveya.app about either language version or any privacy concern.